[SR-Users] Help needed for OpenSer with Radius

[Pratik Shrestha]

Dear Daniel,

Before I work for the new version, I am first trying to configure old
version of openser and radius. I am using openser version 1.0.1 and radius
client version 0.5.1 and I am following the tutorial given in
http://kamailio.net/docs/openser-radius-1.0.x.html.

My freeradius server is in another machine and when I use radclient to check
the user I made, I get the "Authenticated" message.
But when I use X-lite and connect to openser, it seems openser is not
talking with freeradius servers. I am sure the "secret" I am using is right
as I have already tested from radclient. The log which I am getting in
openser is as shown below

9(1986) SIP Request:
 9(1986)  method:  <REGISTER>
 9(1986)  uri:     <sip:192.168.0.56>
 9(1986)  version: <SIP/2.0>
 9(1986) parse_headers: flags=2
 9(1986) Found param type 232, <branch> =
<z9hG4bK-d8754z-c33212005635f16c-1---d8754z->; state=6
 9(1986) Found param type 235, <rport> = <n/a>; state=17
 9(1986) end of header reached, state=5
 9(1986) parse_headers: Via found, flags=2
 9(1986) parse_headers: this is the first via
 9(1986) After parse_msg...
 9(1986) preparing to run routing scripts...
 9(1986) parse_headers: flags=100
 9(1986) DEBUG:maxfwd:is_maxfwd_present: value = 70
 9(1986) parse_headers: flags=10
 9(1986) DEBUG:parse_to:end of header reached, state=9
 9(1986) DEBUG: get_hdr_field: <To> [44]; uri=[sip:101%40kamailio.org@
192.168.0.56]
 9(1986) DEBUG: to body ["101"<sip:101%40kamailio.org at 192.168.0.56>
]
 9(1986) DEBUG: add_param: tag=cc6e4259
 9(1986) DEBUG:parse_to:end of header reached, state=29
 9(1986) radius_is_user_in(): Failure
 9(1986) parse_headers: flags=200
 9(1986) get_hdr_field: cseq <CSeq>: <2> <REGISTER>
 9(1986) DEBUG: get_hdr_body : content_length=0
 9(1986) found end of header
 9(1986) find_first_route: No Route headers found
 9(1986) loose_route: There is no Route HF
 9(1986) grep_sock_info - checking if host==us: 12==9 &&  [192.168.0.56] ==
[127.0.0.1]
 9(1986) grep_sock_info - checking if port 5060 matches port 5060
 9(1986) grep_sock_info - checking if host==us: 12==12 &&  [192.168.0.56] ==
[192.168.0.56]
 9(1986) grep_sock_info - checking if port 5060 matches port 5060
 9(1986) grep_sock_info - checking if host==us: 12==9 &&  [192.168.0.56] ==
[127.0.0.1]
 9(1986) grep_sock_info - checking if port 5060 matches port 5060
 9(1986) grep_sock_info - checking if host==us: 12==12 &&  [192.168.0.56] ==
[192.168.0.56]
 9(1986) grep_sock_info - checking if port 5060 matches port 5060
 9(1986) check_nonce(): comparing [4c5649b2d78b205e6a5ca1c6dcdc54b84445dd9c]
and [4c5649b2d78b205e6a5ca1c6dcdc54b84445dd9c]
 9(1986) ERROR:auth_radius:radius_authorize_sterman: rc_auth failed
 9(1986) build_auth_hf(): 'WWW-Authenticate: Digest realm="192.168.0.56",
nonce="4c5649b2d78b205e6a5ca1c6dcdc54b84445dd9c"
'
 9(1986) parse_headers: flags=ffffffffffffffff
 9(1986) check_via_address(192.168.0.148, 192.168.182.3, 0)
 9(1986) DEBUG:destroy_avp_list: destroying list (nil)
 9(1986) receive_msg: cleaning up

At freeradius also, no request goes from openser.

Please advise me how to get rid of this problem.

Best Regards,
Pratik

On Wed, Jul 28, 2010 at 5:56 PM, Pratik Shrestha <pratikdbl at gmail.com>wrote:

> Thanks a lot. I will give it a try
>
> Pratik
>
>
> On Wed, Jul 28, 2010 at 3:48 PM, Daniel-Constantin Mierla <
> miconda at gmail.com> wrote:
>
>> Hello,
>>
>>
>> On 7/22/10 6:06 AM, Pratik Shrestha wrote:
>>
>>> Dear All,
>>>
>>> I am very new to OpenSer. I want to use latest version of OpenSer with
>>> Radius. I need the documentation/tutorial on how to do this. Googling, Ionly
>>> found for the old version. Please help me.
>>>
>>
>> indeed, there is a rather old version:
>>
>> http://www.kamailio.org/docs/openser-radius-1.0.x.html
>>
>> What I can say now is that you can skip the part of installing kamailio
>> and use next link instead:
>> http://www.kamailio.org/dokuwiki/doku.php/install:kamailio-3.0.x-from-git
>>
>> Radius client library is now in most of common Linux distributions, so you
>> can install it with the package manager (you need the devel headers as well,
>> the -dev package).
>>
>> FreeRadius configuration should be more or less the same.
>>
>> The config of kamailio has changed quite a lot. Use the default one from
>> kamailio, follow the WITH_AUTH define conditions and replace auth_db with
>> auth_radius modules and functions. Also, the rest of radius modules were
>> merged into misc_radius. For enabling radius acc, you need to recompile acc
>> module after editing the Makefile in module directory.
>>
>> Hope it helps to start, ask here if you get stuck.
>>
>>
>> Cheers,
>> Daniel
>>
>> --
>> Daniel-Constantin Mierla
>> http://www.asipto.com/
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20100802/c4432453/attachment.htm>